Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to send out notifications from my web-app and I've setup postfix as a null client on my server. So in my /etc/postfix/master.cf I have commented out the lines

#smtp      inet  n       -       -       -       -       smtpd
#local     unix  -       n       n       -       -       local

So after I did that when I try to use telnet, it blocks me out.

$ telnet localhost 25
Trying 127.0.0.1...
telnet: Unable to connect to remote host: Connection refused

And when I use sendmail I am able to send emails, which is what I want. So far so good.

Now, I'm concerned about spammers not using my SMTP server as an open relay. To this end, do I need to turn on TLS and SMTP Auth support in postfix or is just disabling network access to postfix (by commenting out those two lines in master.cf) sufficient?

In other words, in my current setup - with TLS turned OFF and network access to postfix disabled - is there a possibility of my SMTP server being compromised?

share|improve this question
1  
If you have completely disabled access to SMTP, it cannot be used. TLS vs no TLS doesn't make any difference. –  grawity Jul 1 '10 at 15:15
    
The line I commented out is smtp via network interfaces smtp inet . There is another line in the config file which goes like smtp unix which I'm guessing is the one that needs to be enabled to make sendmail work. –  ErJab Jul 1 '10 at 17:04

2 Answers 2

up vote 1 down vote accepted

TLS is used for secure communications with your server. Most spammers and legitimate mailservers would rarely use TLS to send mail to/through your server. It is more common that you would use TLS when sending mail from your email program, i.e. Outlook, Thunderbird, etc.

With network access disabled, you wouldn't be able to send mail from an email client, but, spammers and legitimate mail wouldn't be able to be delivered to your server.

Disabling smtp should work in your situation.

share|improve this answer
    
"legitimate mail wouldn't be able to be delivered to your server." Yeah, I'm using this postfix server to just SEND email. –  ErJab Jul 1 '10 at 4:54

I would suggest setting up Postfix with TLS & SMTP Authentication.

This link should explain most of the process on properly securing your mailserver.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.